Privacy policy.

This policy explains what personal information Empower Her Thrive collects, why, and what we do with it. It covers the newsletter, the contact form, the director-readiness scorecard, and booking a call. We only collect what a small coaching practice needs to reply to you and run its services.

Who we are

Empower Her Thrive is a solo leadership coaching practice for senior-manager women. The data controller for the information described here is Empower Her Thrive [registered business details to be added].

If you have a question about your data, or want to exercise any of the rights below, email hello@empowerherthrive.com.

What we collect, and why

We collect information only when you choose to give it, through one of four things.

Newsletter (field notes)

If you subscribe, we store your email address. Subscription is double opt-in: after you sign up we email you a confirmation link, and nothing is added to the mailing list until you click it. Every newsletter carries a one-click unsubscribe link, and unsubscribing removes you from the list.

Contact form

When you send a message, we store your name, email address, and the message itself, so the coach can read it and reply. Your email is used as the reply address.

Director-readiness scorecard

If you complete the scorecard and ask for your results by email, we store your email address and your scores, so we can send those results and, where relevant, follow up about coaching.

Booking a call

When you book a call, we store your name, email address, your current role, any notes you add, and the time you chose. To place the call in a calendar and create a video link, your name and email are shared with Google Calendar as attendee details (see below).

Where your data goes

We use a small set of established service providers to run the site and its services. We do not add others without reason.

• Supabase stores newsletter subscriptions, contact messages, scorecard results, and bookings in a secure database.
• Resend sends the emails: newsletter confirmations and issues, contact notifications, scorecard results, and booking confirmations. Confirmed subscribers are also held in Resend so the newsletter can be sent.
• Google Calendar receives your name and email as attendee details when you book a call, so the call appears in the calendar with a video meeting link.
• Vercel hosts the website and runs the code that handles the forms.

What we don’t do

• We do not sell or rent your data to anyone.
• We do not use advertising or cross-site tracking.
• The site sets no cookies today.
• If we add analytics, it will be a privacy-preserving, cookieless count of page visits (Vercel Web Analytics) that does not identify you.
• Forms carry automated anti-spam checks. These protect the forms; they are not used to profile you.

Our legal bases

Under UK GDPR we rely on the following legal bases for processing your data.

• Consent for the newsletter. You opt in, confirm by email, and can withdraw at any time by unsubscribing.
• Legitimate interests for replying to enquiries, handling bookings, sending scorecard results you asked for, and running anti-spam checks. This lets a small practice respond to the people who contact it and keep its forms working, in a way you would reasonably expect.

How long we keep your data

• Newsletter subscribers: if you unsubscribe, we keep a record that you did, so we do not email you again by mistake. Ask us and we will remove it entirely.
• Contact messages, scorecard results, and bookings: kept as ordinary business records until you ask us to delete them.

You can ask us to delete your data at any time (see your rights, below).

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the data we hold about you (access);
• ask us to correct data that is wrong or incomplete (rectification);
• ask us to delete your data (erasure);
• receive your data in a portable format (portability);
• object to processing we base on legitimate interests;
• withdraw your consent to marketing at any time.

How to exercise your rights

Email hello@empowerherthrive.com and tell us what you would like. We will respond within one month, and there is no charge for a reasonable request.

International transfers

Some of our service providers may process data on servers outside the UK. Where that happens, the transfer is covered by appropriate safeguards recognised under UK data protection law.

Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk. We would appreciate the chance to put things right first, so please contact us as well.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. We will tell newsletter subscribers by email about significant changes that affect them.